Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
File:                     2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft (raw, json)
Hash identifier:          KRYuvdMyP+m7qh8aJYOYGIuP60tZmZ9NCRBoyAFaB9U=
Subject key identifier:   DB:4E:E3:72:AE:E6:00:64:64:C3:31:A5:66:66:FE:F9:E4:89:A3:33
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Certificate issuer:       /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial:       7D608C008B5FB1F21E100F5BB0282AB973FB9383
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
Manifest number:          E7
Signing time:             Sun 22 Jun 2025 14:03:14 +0000
Manifest this update:     Sun 22 Jun 2025 13:58:14 +0000
Manifest next update:     Mon 23 Jun 2025 16:53:14 +0000
Files and hashes:         1: 3136382e3232382e3138392e302f32342d3234203d3e20323636303230.roa (hash: WgHjKKnRcPOCOcHBhCCtR4dGRxiBafdGRse0ADt7cGA=)
                          2: 3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa (hash: AJ/KXBH0F3Lo+FaEuMWX0v5Ko4hHoAW3z9BgaWSvLvw=)
                          3: 2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl (hash: osklh7NDNFdQcxcxq5zodpMgaJx/3k2gf2VB6iw6+6Q=)
                          4: 323830343a333933633a3a2f33322d3332203d3e20323636303230.roa (hash: xHWAeA0Cgl76WslKoPxKYeAl4nPfwsN0r2FRwxAm3Hc=)
                          5: 3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa (hash: jkoEPVj5CwO+UHZUwS1R8VzH1Md5GDd+v74YV5Y+1eE=)
                          6: 3137302e3234352e3233382e302f32342d3234203d3e20323636303230.roa (hash: wR3va8jKsVNGWlsg37FAbmpwDecH7FxL1wgBCYJBUyw=)
                          7: 3137302e3234352e3233362e302f32322d3232203d3e20323636303230.roa (hash: NBvspvXpYUCWx/SgDUAz8RsBlUbtVVjXpIPVZMxYAIQ=)
                          8: 323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa (hash: Y0tFHHqmOfumtLoGnSC4p2sgvFE3tgpxEY3YgdRQX4M=)
                          9: 3137302e3234352e3233372e302f32342d3234203d3e20323636303230.roa (hash: rJhXVqLpsYkngwan8Z+HVH8q5X4aOVj3SVdMUso2xGQ=)
                          10: 3137302e3234352e3233392e302f32342d3234203d3e20323636303230.roa (hash: FP49kIC2o9ve5FeQPxjBiciH/Hm67a+98Tf6eJ44ZIQ=)
                          11: 3137302e3234352e3233382e302f32332d3233203d3e20323636303230.roa (hash: fdfzLPEeWVlNfYGCe0TgP7cK/Jy/inpMxiKv51d8RfI=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 16:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:60:8c:00:8b:5f:b1:f2:1e:10:0f:5b:b0:28:2a:b9:73:fb:93:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
        Validity
            Not Before: Jun 22 13:58:14 2025 GMT
            Not After : Jun 23 16:53:14 2025 GMT
        Subject: CN=DB4EE372AEE6006464C331A56666FEF9E489A333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:f3:a9:78:58:aa:c0:de:fa:99:22:5a:a2:
                    98:cb:96:fa:00:c2:04:5a:15:70:92:ea:58:0c:9f:
                    ab:4f:95:de:48:ad:8d:e9:f6:ba:43:7f:c1:f0:9b:
                    75:0e:08:da:24:36:d9:d9:98:0a:ae:88:0d:f5:fd:
                    2b:94:d7:ce:a8:ff:fa:27:42:f4:33:aa:c3:9b:e3:
                    b0:18:16:51:02:36:fb:6f:9b:c6:56:b7:bf:ec:55:
                    a9:1c:58:6a:0e:57:0e:f5:64:3f:5d:5b:53:c4:6f:
                    44:58:41:20:8b:48:31:ab:65:dc:9b:e7:e7:72:72:
                    3c:5a:85:9d:1e:2b:ca:08:7e:86:86:9e:da:e5:b6:
                    29:f8:67:69:7a:f0:b0:2e:e0:69:61:e2:3b:73:38:
                    30:df:f2:38:b9:26:5f:c0:b3:02:3c:96:b1:86:78:
                    b5:9c:ee:f6:d9:9f:55:1b:63:cc:0a:74:df:fb:56:
                    42:d1:97:4a:5a:b7:0e:ea:e5:8a:bd:39:09:17:22:
                    d2:b9:a7:b3:44:bf:ba:29:06:48:25:6a:c8:34:bc:
                    5d:f2:36:db:af:56:aa:2b:68:88:ff:14:a1:20:59:
                    dd:8f:ed:53:ed:fa:e9:af:e9:52:54:75:43:a4:b5:
                    de:31:09:8a:83:09:0b:8b:0d:94:0b:fe:a6:bf:f3:
                    18:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4E:E3:72:AE:E6:00:64:64:C3:31:A5:66:66:FE:F9:E4:89:A3:33
            X509v3 Authority Key Identifier:
                keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:12:c8:23:a0:d0:4b:b7:5c:9c:f5:47:59:19:22:ea:0f:f9:
         51:17:da:cb:04:bb:c2:f2:a0:90:48:58:ed:b8:f6:e5:91:36:
         7d:db:86:18:d4:8b:42:9b:26:94:05:0e:a7:8d:28:f9:1f:74:
         af:1b:72:8a:59:b6:f6:f2:18:61:c2:75:23:7f:1d:54:9b:1f:
         4e:8a:cd:92:d9:91:66:e1:53:c7:84:fe:f6:97:79:48:8c:85:
         48:eb:35:7d:8b:d7:fc:6c:cd:db:1b:7f:43:70:2e:5d:47:8b:
         93:dc:4f:77:11:7d:2e:95:9f:17:03:8d:fc:f1:77:f2:44:92:
         6c:e5:44:a9:15:3b:15:76:47:d4:cf:e4:71:16:cc:5f:d7:ed:
         78:76:84:36:9b:e5:b3:0a:47:f5:f6:dc:9b:1e:7a:c6:e4:c1:
         e7:63:8b:b8:26:d7:57:ac:76:db:d4:d4:11:e8:f9:55:10:62:
         16:ff:dc:11:cd:82:a4:cd:a2:e8:0e:0e:86:9a:ba:fc:68:3d:
         7b:ca:f2:41:ac:67:6a:39:2f:39:30:e9:73:d4:a0:bb:10:c3:
         6b:6e:af:88:4a:3e:29:8d:3b:7e:06:43:68:23:dc:a8:99:5a:
         05:16:ad:16:2a:cf:5d:2f:ce:d8:39:6c:db:b3:b5:a4:67:cc:
         3b:4b:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:06:55 2025 by rpki-client